SSL Certificate Analysis for boxesandbears.com - Security Grade & TLS Configuration

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=loveaustria.com

Issuer

C=US, O=Let's Encrypt, CN=R12

Valid From

May 21, 2026

Valid Until

August 19, 2026 78 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

D2:9C:CB:A8:86:0E:E1:43:90:D4:50:94:C9:AB:D6:2B:4A:5D:63:2A:24:0A:CA:CA:B4:44:C0:61:06:8A:F9:E5

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Excellent

max-age=31536000; includeSubDomains; preload

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Excellent

DENY

X-Content-Type-Options

Good

nosniff

Referrer-Policy

Good

strict-origin

Permissions-Policy

Present

geolocation=(), midi=(), sync-xhr=(); +6 more

Recommendations

• Add Content-Security-Policy header to prevent XSS attacks

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

boxesandbears.com *.boxesandbears.com *.pay.boxesandbears.com

Other domains in certificate

0005552xx3.shop *.0005552xx3.shop *.com.0005552xx3.shop

27511.one *.27511.one *.297176c2-3146-43e3-bb9f-7fb250b7d296.27511.one *.adm.27511.one *.admin.27511.one *.adonis.27511.one *.app.27511.one *.backend.27511.one *.beta.27511.one *.cdn.27511.one *.chat.27511.one *.crm.27511.one *.dan.27511.one *.de.27511.one *.edu.27511.one *.erp.27511.one *.es.27511.one *.external.27511.one *.game.27511.one *.h5.27511.one *.hostmaster.27511.one *.hr.27511.one *.img.27511.one *.laravel.27511.one *.mail.27511.one *.mobile.27511.one *.mta-sts.27511.one *.mx.27511.one *.nfspfweb.27511.one *.portal.27511.one *.staging.27511.one *.store.27511.one *.wefwiapp.27511.one *.ww25.27511.one *.www.27511.one

a293ylxx.top *.a293ylxx.top *.abc.a293ylxx.top

atlanticjerseys.com *.atlanticjerseys.com *.m.atlanticjerseys.com

*.autodiscover.gsmandiri.com *.cpanel.gsmandiri.com gsmandiri.com *.gsmandiri.com

*.admin.loveaustria.com *.blog.loveaustria.com *.community.loveaustria.com *.downloads.loveaustria.com *.film.loveaustria.com *.hr.loveaustria.com *.i.loveaustria.com *.id.loveaustria.com loveaustria.com *.loveaustria.com *.ms.loveaustria.com *.net.loveaustria.com *.online.loveaustria.com *.pay.loveaustria.com *.random.loveaustria.com *.saratov.loveaustria.com *.se.loveaustria.com *.secure.loveaustria.com *.seo.loveaustria.com

pharmacyprofessional.com *.pharmacyprofessional.com

*.9n5ewb.remoteitsolutions.biz remoteitsolutions.biz *.remoteitsolutions.biz

*.nm911q.surrealfictional.digital surrealfictional.digital *.surrealfictional.digital

*.g522qbpi.vlqysqovqcpxu455jpzx.top vlqysqovqcpxu455jpzx.top *.vlqysqovqcpxu455jpzx.top

*.hostmaster.waddys.com *.sitemaps.waddys.com waddys.com *.waddys.com *.ww17.waddys.com *.ww25.waddys.com

*.gorg.yogurt.net yogurt.net *.yogurt.net